Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa
File:                     8245406e-c9af-32c4-8bfe-07765def09b9.roa (raw, json)
Hash identifier:          vJ1WAIrj8uYQsio300ve7LTpy9Fq+oQGb3c+ZI5P94w=
Subject key identifier:   5F:78:53:47:97:46:BB:01:EF:F1:8D:01:60:38:93:27:5B:C0:E0:32
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584A81460C24B6D21A14868AF800
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     12041
IP address blocks:        65.22.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:0c:24:b6:d2:1a:14:86:8a:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=96b78b31-2cef-4ce2-9b92-b395cc34b086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:72:65:e3:63:ae:b6:cb:72:f2:a9:b3:8f:
                    88:b5:9e:d2:39:56:97:dd:af:e4:01:a5:9b:80:0d:
                    bd:10:f8:58:60:5c:ea:9a:aa:38:82:17:ac:2e:26:
                    0b:10:22:5a:fe:98:8a:05:55:b6:4e:af:df:08:95:
                    25:9d:d5:ac:ed:d9:71:44:ac:78:c4:a8:15:75:73:
                    bc:aa:d5:6d:a9:ea:0d:12:eb:39:15:69:92:0a:02:
                    85:1b:b7:5e:07:98:89:04:92:77:e8:b4:1b:e8:d5:
                    cf:26:fd:95:1d:ec:f4:c1:0a:20:64:97:4f:32:7d:
                    d9:f6:f4:3f:6c:ee:db:2c:51:6d:7d:89:81:83:d0:
                    d1:23:cd:2e:6c:3c:7b:92:06:64:7e:36:32:a3:fd:
                    de:02:8c:db:86:6a:e5:7f:2b:c9:6b:48:00:8c:06:
                    f2:00:d1:64:90:b7:85:32:b9:f3:bd:2f:29:11:52:
                    c3:a0:5d:a4:d2:6e:34:79:3d:2a:45:82:86:c0:67:
                    5c:98:9a:f8:3a:46:e4:51:e0:83:96:64:c8:3b:c7:
                    e2:be:97:9d:ec:4e:1d:32:9e:0f:13:ca:41:9e:35:
                    9c:0a:93:91:e3:e0:01:36:cc:fa:00:6b:61:a7:b0:
                    4f:2e:c2:a8:69:f8:07:38:38:be:44:1b:9c:11:dd:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:78:53:47:97:46:BB:01:EF:F1:8D:01:60:38:93:27:5B:C0:E0:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:7e:47:3d:81:ff:1b:b0:f1:fe:cd:2f:c4:43:1f:da:e2:85:
         83:6f:b0:86:11:1f:5a:fc:16:88:ef:f8:ac:af:d7:5f:91:ab:
         45:d1:d6:68:a8:6f:25:da:1f:70:6d:80:ab:e1:65:ae:b0:1c:
         d6:3b:75:90:db:5f:be:d2:34:80:9b:c9:f0:a5:f6:52:34:f1:
         c6:53:11:9e:42:64:2e:8c:1f:21:bc:17:21:55:1a:ef:0a:e4:
         0c:12:21:61:bf:be:45:5a:dd:c7:1b:93:aa:fb:4e:2b:7f:53:
         9c:4a:7c:b7:d6:a9:0c:c6:dc:14:ba:42:28:f3:bd:67:55:3d:
         fb:19:fc:75:e0:e9:10:cb:f9:22:92:ba:5d:a2:a7:a3:e0:7b:
         a1:3c:00:eb:65:4c:6f:20:77:19:02:b3:54:e0:c5:85:da:2a:
         9c:48:57:ed:8e:26:07:18:a5:f6:f7:c4:de:ec:13:c0:a1:56:
         80:80:5c:01:a8:07:a2:bf:db:55:c3:46:d4:ab:64:61:6a:20:
         15:5b:eb:e8:d6:b8:ce:32:dc:a5:05:d2:35:84:e1:94:c8:78:
         b4:42:2b:e6:4f:bb:20:29:8c:21:37:43:99:89:61:69:a0:67:
         24:cf:47:f2:48:77:06:36:b1:72:65:9e:55:2b:d6:6c:38:f3:
         15:d5:33:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRgwkttIaFIaK+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
OTZiNzhiMzEtMmNlZi00Y2UyLTliOTItYjM5NWNjMzRiMDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosRyZeNjrrbLcvKps4+ItZ7SOVaX3a/kAaWb
gA29EPhYYFzqmqo4ghesLiYLECJa/piKBVW2Tq/fCJUlndWs7dlxRKx4xKgVdXO8
qtVtqeoNEus5FWmSCgKFG7deB5iJBJJ36LQb6NXPJv2VHez0wQogZJdPMn3Z9vQ/
bO7bLFFtfYmBg9DRI80ubDx7kgZkfjYyo/3eAozbhmrlfyvJa0gAjAbyANFkkLeF
MrnzvS8pEVLDoF2k0m40eT0qRYKGwGdcmJr4OkbkUeCDlmTIO8fivped7E4dMp4P
E8pBnjWcCpOR4+ABNsz6AGthp7BPLsKoafgHODi+RBucEd2ivQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF94U0eXRrsB7/GNAWA4kydbwOAyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODI0NTQwNmUtYzlhZi0z
MmM0LThiZmUtMDc3NjVkZWYwOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKt+Rz2B/xuw8f7NL8RDH9rihYNvsIYRH1r8Fojv+Kyv11+Rq0XR1mio
byXaH3BtgKvhZa6wHNY7dZDbX77SNICbyfCl9lI08cZTEZ5CZC6MHyG8FyFVGu8K
5AwSIWG/vkVa3ccbk6r7Tit/U5xKfLfWqQzG3BS6QijzvWdVPfsZ/HXg6RDL+SKS
ul2ip6Pge6E8AOtlTG8gdxkCs1TgxYXaKpxIV+2OJgcYpfb3xN7sE8ChVoCAXAGo
B6K/21XDRtSrZGFqIBVb6+jWuM4y3KUF0jWE4ZTIeLRCK+ZPuyApjCE3Q5mJYWmg
ZyTPR/JIdwY2sXJlnlUr1mw48xXVMxI=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:23:04 2025 by rpki-client